Supreme Directory

Supreme Directory has one disclosed vulnerability in the WordSec catalog, all reported in 2018; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Supreme Directory has a vendor fix available, so running the current release closes it.

All of these findings were reported by Franciny Salles. Supreme Directory is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 5 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Supreme Directory vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Supreme Directory < 1.1.9 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2018-08-19 00:00	Supreme Directory < 1.1.9 - Cross-Site Scripting Supreme Directory < 1.1.9	`N/A`	6.1 Medium	Franciny Salles	Yes

Showing 1–1 of 1 reports

Latestv2.1.0.2

Supreme Directory

Author

Paolo

4.4(5)

88/100

Last Updated

2021-05-20 (5y ago)

Active Installs

700+

Downloads

113,737

Requires WP

4.0+

Requires PHP

5.6+

Created

2016-11-26 (10y ago)

Parent Theme

directory-starter

Supreme Directory is a child theme of Directory Starter, check out this video to see how easy it is to setup: https://www.youtube.com/watch?v=_MXfot6buMc. Supreme Directory theme requires minimal setup, it features an eye catching home page design with a full screen featured area boosting parallax effect. Each page can be built using popular page builders.